K11742512 : BIND vulnerability CVE-2022-2795

Security Advisory Description

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver’s performance, effectively denying legitimate clients access to the DNS resolution service. (CVE-2022-2795)

Impact

A flaw in resolver code can cause named to spend excessive amounts of time on processing large delegations. By flooding the target resolver with queries exploiting this flaw, an attacker can significantly impair the resolver’s performance, effectively denying legitimate clients access to the DNS resolution service.